INFO: task kworker/0:7:4239 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:7 state:D stack:24368 pid: 4239 ppid: 2 flags:0x00004000
Workqueue: gfs_recovery gfs2_recover_func
Call Trace:
context_switch kernel/sched/core.c:5049 [inline]
__schedule+0x11c3/0x4350 kernel/sched/core.c:6395
schedule+0x11b/0x1e0 kernel/sched/core.c:6478
io_schedule+0x7c/0xd0 kernel/sched/core.c:8503
wait_on_page_bit_common+0x8bf/0xeb0 mm/filemap.c:1356
wait_on_page_locked include/linux/pagemap.h:688 [inline]
gfs2_jhead_process_page+0x252/0xbf0 fs/gfs2/lops.c:476
gfs2_find_jhead+0xdaf/0xf00 fs/gfs2/lops.c:597
gfs2_recover_func+0x73a/0x1cd0 fs/gfs2/recovery.c:462
process_one_work+0x867/0xff0 kernel/workqueue.c:2310
worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
kthread+0x42e/0x520 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
INFO: task syz.5.65:4695 blocked for more than 147 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.65 state:D stack:24272 pid: 4695 ppid: 4506 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5049 [inline]
__schedule+0x11c3/0x4350 kernel/sched/core.c:6395
schedule+0x11b/0x1e0 kernel/sched/core.c:6478
bit_wait+0xd/0xc0 kernel/sched/wait_bit.c:199
__wait_on_bit kernel/sched/wait_bit.c:49 [inline]
out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64
wait_on_bit include/linux/wait_bit.h:76 [inline]
gfs2_recover_journal+0x104/0x150 fs/gfs2/recovery.c:579
init_journal+0x17fa/0x22d0 fs/gfs2/ops_fstype.c:837
init_inodes+0xdb/0x320 fs/gfs2/ops_fstype.c:891
gfs2_fill_super+0x1671/0x1ea0 fs/gfs2/ops_fstype.c:1249
get_tree_bdev+0x3e6/0x610 fs/super.c:1336
gfs2_get_tree+0x4d/0x1e0 fs/gfs2/ops_fstype.c:1332
vfs_get_tree+0x88/0x270 fs/super.c:1541
do_new_mount+0x247/0xa40 fs/namespace.c:3034
do_mount fs/namespace.c:3377 [inline]
__do_sys_mount fs/namespace.c:3585 [inline]
__se_sys_mount+0x2e3/0x3d0 fs/namespace.c:3562
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fecb48f254a
RSP: 002b:00007fecb2b27e58 EFLAGS: 00000246
ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fecb2b27ee0 RCX: 00007fecb48f254a
RDX: 0000200000000640 RSI: 0000200000000680 RDI: 00007fecb2b27ea0
RBP: 0000200000000640 R08: 00007fecb2b27ee0 R09: 0000000000000010
R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000680
R13: 00007fecb2b27ea0 R14: 0000000000038011 R15: 00002000000006c0
Showing all locks held in the system:
4 locks held by ksoftirqd/1/20:
1 lock held by khungtaskd/27:
#0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
2 locks held by kworker/u4:2/154:
1 lock held by dhcpcd/3851:
#0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
#0: ffffffff8e24d5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 net/core/rtnetlink.c:5695
2 locks held by getty/3943:
#0: ffff88802db40098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252
#1: ffffc900026562e8 (&ldata->atomic_read_lock
){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 drivers/tty/n_tty.c:2158
1 lock held by sshd-session/4172:
1 lock held by syz-executor/4193:
#0: ffffffff8d123a28 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline]
#0: ffffffff8d123a28 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 kernel/rcu/tree_exp.h:845
2 locks held by kworker/u4:5/4230:
2 locks held by kworker/0:5/4232:
#0: ffff888017872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 kernel/workqueue.c:-1
#1: ffffc900031afd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 kernel/workqueue.c:2285
2 locks held by kworker/0:7/4239:
#0: ffff88814637b938
((wq_completion)gfs_recovery){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 kernel/workqueue.c:-1
#1: ffffc900031ffd00 ((work_completion)(&jd->jd_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 kernel/workqueue.c:2285
5 locks held by kworker/u4:8/4461:
#0: ffff8880179cd938 (
(wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 kernel/workqueue.c:-1
#1: ffffc90003d7fd00
(net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 kernel/workqueue.c:2285
#2: ffffffff8e241690 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 net/core/net_namespace.c:589
#3: ffff88804f6e93e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x112/0x300 drivers/net/wireguard/device.c:233
#4: ffffffff8d123930 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4c0 kernel/rcu/tree.c:4043
1 lock held by syz.5.65/4695:
#0: ffff888023de00e0 (&type->s_umount_key#66/1){+.+.}-{3:3}, at: alloc_super+0x200/0x970 fs/super.c:229
4 locks held by syz-executor/6770:
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
nmi_cpu_backtrace+0x3a2/0x3d0 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x163/0x280 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline]
watchdog+0xe1b/0xe60 kernel/hung_task.c:369
kthread+0x42e/0x520 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 4193 Comm: syz-executor Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:preempt_latency_start kernel/sched/core.c:5492 [inline]
RIP: 0010:preempt_count_add+0xb5/0x190 kernel/sched/core.c:5515
Code: 0b 00 85 c0 74 09 31 db 31 ff e8 d6 d1 0b 00 65 4c 8b 35 6e 17 b0 7e 49 81 c6 e8 14 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 71 10 6c 00 49 89 1e 5b 41 5e 41 5f c3 89 fb e8
RSP: 0018:ffffc90002f4ef70 EFLAGS: 00000246
RAX: 1ffff1100474a29d RBX: ffffffff81351ed7 RCX: ffffffff9711bf00
RDX: dffffc0000000000 RSI: ffffffff81b43547 RDI: ffffffff81351ed7
RBP: 1ffff920005e9e0c R08: ffffc90002f4f0f0 R09: 0000000000000000
R10: dffffc0000000000 R11: fffff520005e9e11 R12: ffffffff81b43547
R13: ffffc90002f4f2f8 R14: ffff888023a514e8 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055d93b1c0660 CR3: 000000002c3a3000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
unwind_next_frame+0x97/0x1cf0 arch/x86/kernel/unwind_orc.c:433
arch_stack_walk+0x10c/0x140 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0xa6/0xf0 kernel/stacktrace.c:122
save_stack+0x121/0x230 mm/page_owner.c:119
__reset_page_owner+0x51/0x180 mm/page_owner.c:140
reset_page_owner include/linux/page_owner.h:24 [inline]
free_pages_prepare mm/page_alloc.c:1340 [inline]
free_pcp_prepare mm/page_alloc.c:1391 [inline]
free_unref_page_prepare+0x637/0x6c0 mm/page_alloc.c:3317
free_unref_page_list+0x119/0x830 mm/page_alloc.c:3433
release_pages+0x185f/0x1bd0 mm/swap.c:963
__pagevec_release+0x6d/0xe0 mm/swap.c:983
pagevec_release include/linux/pagevec.h:81 [inline]
shmem_undo_range+0x5cd/0x19a0 mm/shmem.c:964
shmem_truncate_range mm/shmem.c:1063 [inline]
shmem_evict_inode+0x1e2/0x9a0 mm/shmem.c:1145
evict+0x4b6/0x8b0 fs/inode.c:647
__dentry_kill+0x412/0x630 fs/dcache.c:586
shrink_dentry_list+0x388/0x680 fs/dcache.c:1181
shrink_dcache_parent+0xae/0x3d0 fs/dcache.c:-1
do_one_tree+0x23/0xe0 fs/dcache.c:1662
shrink_dcache_for_umount+0x65/0x110 fs/dcache.c:1679
generic_shutdown_super+0x63/0x300 fs/super.c:447
kill_anon_super fs/super.c:1100 [inline]
kill_litter_super+0x72/0xa0 fs/super.c:1109
deactivate_locked_super+0x93/0xf0 fs/super.c:335
cleanup_mnt+0x426/0x4d0 fs/namespace.c:1148
task_work_run+0x125/0x1a0 kernel/task_work.c:188
exit_task_work include/linux/task_work.h:33 [inline]
do_exit+0x635/0x2110 kernel/exit.c:890
do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
__do_sys_exit_group kernel/exit.c:1015 [inline]
__se_sys_exit_group kernel/exit.c:1013 [inline]
__x64_sys_exit_group+0x3b/0x40 kernel/exit.c:1013
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f74061722d9
Code: Unable to access opcode bytes at RIP 0x7f74061722af.
RSP: 002b:00007ffdcdc3da28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f74061722d9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
RBP: 00007f740620a58c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020
R13: 0000000000000000 R14: 000000000004161f R15: 00007ffdcdc3dbe0
virtqueue callback for ffff88801f67bb00 (ffffffff84450960)
virtqueue interrupt with no work for ffff88801f67ba00
virtqueue interrupt with no work for ffff88801f67b900
virtqueue callback for ffff888147a35600 (ffffffff85497fd0)
No more buffers in queue
Receiving skb proto 0x0800 len 52 type 0
No more buffers in queue
nf_conntrack: normal packet for ffff888073aa6000
tcp_in_window: START
tcp_in_window:
seq=3521065140 ack=2732531962+(0) sack=2732531962+(0) win=501 end=3521065141
tcp_in_window: sender end=3521065141 maxend=3521129269 maxwin=65408 scale=7 receiver end=2732531962 maxend=2732596090 maxwin=64768 scale=7
tcp_in_window:
seq=3521065140 ack=2732531962+(0) sack=2732531962+(0) win=501 end=3521065141
tcp_in_window: sender end=3521065141 maxend=3521129269 maxwin=65408 scale=7 receiver end=2732531962 maxend=2732596090 maxwin=64768 scale=7
tcp_in_window: I=1 II=1 III=1 IV=1
tcp_in_window: res=1 sender end=3521065141 maxend=3521129269 maxwin=65408 receiver end=2732531962 maxend=2732596090 maxwin=64768
tcp_conntracks:
syn=0 ack=1 fin=1 rst=0 old=7 new=7